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Read process hoa r d to A, 



Does not skip 
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Set process hoard from A* 
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11,0 Extended System Features 

Two powerful features of the PpP^l time sharjng system 

are the ability to have multiple processes in a single 
sphere, and the ability to create other spheres which may 

have their own processes, since part 4 of the instruction 

manual is devoted to the gses of multiple processes jn a 

sphere, the related mta's and ivk's will not be discussed 
here. 

The rest of this memo W «U be Primarily concerned with 

the use of spheres ; intersphere and intrasphere communica^ 

tionsj creation and Control of spheres, and error hand! ins 
capaci t i es. 

Iltl Purpose of Spheres 

It is sometimes useful for a user to create a sphere ; 
that is, create separate processes running in an address 

space independent of the address space of the creator, and 
with a separate set of capabilities* For example, suppose a 
user program F00 wanted to run some other program DESTROY 
which, either malicio u sly or because of program bygs, might 
attempt to wreak havoc in FQu, F00 could create an inferior 
sphere, load DESTROY into it, grant it any necessary 
capabilities, run the program, and be quite safe from 
whatever might occur. The program ID is an example of this. 
The typewriter capability and 4K of core the user has upon 
logging in (the user's initial sphere) is a sphere owned by 
the u se r 's ID* 

Spheres are also frequently used when the user program 
wishes to run another program jn a "nice" environment. For 
example, "HID" js a program designed to enable users to 
debug programs that r u n in more than one sphere, This is 
accomplished by creating two inferior spheres, placing ID 
into one of them, and the user's Program into the other, 
DurinS execution, JD thinks that it is receiving traps 
directly from the userts sphere as usual, while actually all 
traps are being filtered by HID. Similarly, all typeout 
from ID is passed through an entry into 1 1 1 which first 
generates a process state display and only then directs ID's 
output to the console. In addition to controlling the input 
and output streams for ID, HID monitors all spheres created 
by th© user such that he may point his ID at any o n e of them 
in order to follow processes within the selected sphere. 
Furthermore, by carefully reading and writing ID'S core 
during sphere switching, 1 1 1 permits the user to have 
breakpoints set in m a ny spheres simultaneously, FORTRAN 
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programs wishing to manipulate microtape datafileg provide 
another example. The opening* closjng, reading* and writing 
of the datafile has been implemented by running the File 
System of the appropriate tape in an inferior sphere. 

Only a user's initial sphere has the ability to have 
capabilities with PrL off, see section 1,5 on PRL. 



II. 2.1 



Ownership and Receiving Traps 



When sphere A creates a sphere B, sphere A receives a 
master sphere capability to a. Ownership of a master 
capability by A makes A the superior sphere to B* and B the 
inferior sphere, There may be at most one master capability 
to a sphere at a time; there may be none. This implies that 
other copies of a sphere capability created by a mta 405 
(copy capability) or a grant or share sphere jvk (described 
later) will not be master capabilities, A sphere may be Its 
own superior* 




7 

10 
11 
12 
13 



i I I ega I instruct i on* 

irrecoverable or return not enabled 

lock fayit 

ESI trap 

I/O function busy trap 

bpt trap 

unused 

illegal memory reference* 

return not enabled 

(except for illegal ref~ 

erence to PRL* which is 

an i I ! ega I Instruct i on 

and therefore code 0). 

unused 

mta 4 (hit) 

mta 5 

mta 6 

mta 7 (dsm) 
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Informing the superior is clone by an entered process as 
diagrammed below, 

sphere A 





sphere B 
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Wnen the process executes whatever instruction causes the 
trap, the following steps occur; 

15 the process executing the Instruction Is "hung"; no 
further instructions may be execyted unless the process 
is explicitly restarted, 

2) A system "pointer" to this Process state is placed in the 
first unused C-l Ist location provided that the superior's 

run indicator is on, that an unused CHist location 
exists, and that step 3 can occur* This pointer is called 
an entered process capability, 

3) A new process is created in the superior sphere f This 
process will have in its AG the Index of the entered 
process capability created in step 2* The I register will 
contain the octal number to 13 from the above list 
describing the reas n for the trap. 




In the diagrams above, C-list index "y" implies the 
entered process capability added \n step Z, and.C-Jlst l-**x 
»x" represents the index of the master sphere capabi|ity# 
Reversing this entire entry mechanism will be discussed 
later* 

A sphere that wishes to guarantee an enter can occur 
should set its process hoard. Hoards are more fully de- 
scribed in part 4 of the Instruction Manual, 
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Mta-Trap Mode 

A sphere may choose to handle all mtats i 200 executed by 
an inferior rather than ha ve them handled by the Administra- 
tive Routine. To trap such mta's, first the superior must 
set run status, (See sphere ivk 512,) Then, whenever any 
process jn the inferior attempts to execute mta's i 200, the 
f o I lowing occurs; 

I and 2) Identical as for a fault (above), 

3) A new process is Created in the superior sphere. Its AC 
will contain the index of the entered process capability 
created in step 2. I will contain the mta number* The mta 
number in I is compressed; e,g, mta 306 appears as 36 f 

The fault address specified when the sphere was subju^ 
gated in Put in G(3~i7) a n d G(0^2) is cleared. All other 
registers of the created Process contain zero. 
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11.2,2 Relevant Instructions 

Instruction Action 

mta 302 

Create sphere, Creator receives a master sphere capa^ 
bility, AQ2-17) contains the desired index or if 
first free capability to be used. 1(3- 17) should 
contain the fault entry address. Skip if success- 
ful. The sphe r e wj|l initially have; 
core (memory bound = 10000) 
PRt off (sphere may not own capabilities) 
run indicator off 

(the following have not yet been described) 
breakpoint variables disabled (777777,0,0) 
illegal instruction return disabled (777777) 
illegal memory reference return disabled (777777) 
no attachments 

mta 4 

This is the hjt instruction. Causes a mta 4 trap to 
the superior* 

mta *5 

Causes rata 5 tra p to superior, ID will interpret this 

as a request to perform a command string (see ID 

memo). 

mta 6 

cause mta 6 trap, 

mta 7 

This is the dsm instruction* ID interprets this as a 
"normal completion"* 
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Spher© ivks. 
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A \///////////\ count \W\ 0\ \ 

5 6 12 13 14 15 17 

I \/////\ sphere address \ 0\ 

2 3 12 13 17 



N////A 
2 3 



core address 



\ 
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AC Code Action 
12 



Suppress processing in the ivk'd sphere. That sphere f s 
run indicator is turned off« 
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Permit Processing, The run indicator is turned on, If 
a sphere's run indicator is on* processes in that 
sphere may r u n and any pending enters will occur. 



Attach, The c or$ module of the invoked sphere (the 
attachee) specified by 1(15-17) becomes attached to 
the sphere executing the ivk as the core module 

48 



soeci f ie 
if the a 
real co 
PRL on) 
If the 
real cor 
will b 
attachme 
spec i f j e 
be remov 
tained 
sphere i 
sect i on 



d by 
ttach 
re wh 
and t 
attac 
e th 
e us 
nt a 
d b 
ed. 
wheth 
s on 
on at 



1(3-5). 
e d Cor© 
i ch } s n 
he attac 
hed core 
e attach 
ed, if 
I ready h 
y 1(3-5) 
An atta 
er the 
or off. 
tachment 



Thi s 
exist 
ot th 
hing 

is 
ed c 

the 
as an 
$ the 
chmen 

run 

Skio 
s. 



instrg 
s (as a 
e core 
core j s 
i tsel f 
ore is 

sphere 
attac 

Prev i o 
t may b 
incjicat 

if sue 



ction wj 
n attach 
of a s 

not a r 
an attac 

an atta 
to re 
hment at 
us attac 
e made 
or of t 
cessf u! , 



| I su 

ment 

phere 

ea I 

hment 

chmen 

cei ve 

the 
hment 
and 
he in 
Ref 



cceed 
or a 
wi th 
core, 
, the 
t to 
the 
area 
wi I I 
ma in- 
voked 
er to 



72 



112 



Reverse attach. Similar to attach. The core module of 
the invoking sphere specified by 1(15^-17) becomes 
attached to the invoked sphere as the core module 
specified by 1(3^5), Skip if successful. 



Read process state, The registers of the process whose 
number is in I are read and stored in six consecu-* 
tive words beginning at the address in W(3-17), The 
order js A, G, I, X, F, and W. The sphere's run 
indicator must be off, Processes are numbered 
beginning with 1. This instruction will fail if the 
numbered process does not exist or the ryn indica- 
tor is on. Skip if successful. 
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Write process state. Similar to read process state, 
This will fail if the numbered process does not 
exist, the r u n indicator is on, or the process Is 
in a wait. Skip if successful. 
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Read breakpoint state. The three words of breakpoint 
state bpl, bp2, bp3 are read into three consecutive 
words beginning at the address in I(3«*17). Does not 
skip. 
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Write breakpoint state. Similar to 152, 
Breakpoints and ESI, Does not skip. 



Refer to 



Create process, 
sphere, 
Its Process 



A 

ie< 
number 



new process is created for the 

and becomes the highest numbered process, 

is returned in A, The run 
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ANNOUNCING -> NEW SPHERE IVK 



AC Code Action 
47? 



Set/clear assignment number if A(o) = 0, assign the same 
console number as that cf the ivk ! er. If A(0j = 1, 
assign as console number. This governs which sense 
switches, display lever, and run light are selected by 
the hardware when the sphere is running. Ordinarily 
(and initially} user-created spheres are assigned to 
console (sense switches on bay 11, no display lever 
or run light). 
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452 



532 
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indicator must be off. The instruction fails if no 
process is available. Skip if successful 



Delete Process* The process whose number is in I is 
deleted. All higher numbered processes are renu m *- 
bered, if th© process is in a wait, it will be 
deleted but the process hoard will diminish by 1, 
This instruction fails if the numbered process does 
not exist or the run indicator is on, Skip if 
successf u I , 



Count processes. The number of processes in the sphere 
is returned in A, ..... 4-L 



512 ' covtsole 4? 06 w£V?h Tj A(o)=1 assVn console -*? 0. Tints o.ei^v^iaeS wUich 
Set/Clear run status* Three status bits to be sense ^Jrkk 
associated with the ivk f d sphere are read from 1(3- i^U/ '^qitjt 
5), 1(3) = 1 and 1(3} =0 respectively enable and „,„ \-ii / 
disable mta*-trap* (See section describing mta- 0^ 
trap), 1(43 = 1 causes all faults normally trapping U5 '<*» ^A\***d 
to the ivk'd sphere to trap to its superior H&i-cr^d 
instead, provided the suoerjor is enabled, has an ■ *fljev*± os« 
unused enlist index, and that a process can t>e a«)«v»«t( U 
created, I(5)si prevents this jvk from having any fex*j fl ie o / sfr>( 
effect if executed in the sphere. The ivk is still s<*;(4 n 0K 
legal however^ in the sense that it will not cause bay $t\ 
ial instruction trap, ? '' 



an ill ega 



Read fault entry address and superior. If the invoked 
sphere has a superior, the fault entry address for 
the invoked sphere in that superior is returned in 
A, and I wj | I indicate the superior sphere (low 
twelve bits of sphere capability). If the invoked 
sphere has n s up erior, then I will contain zero, 
and A will be unchanged. 




the ivk. Skip if successful. 



572 



Execute mta. The W register is moved to A, and the 
meta^i nstryct | on whose code was originally In A(0- 
8) is executed as if by a process in the sphere. 
Values returned by the meta^i nstruct j on will be 
placed in a and I, Only instructions i mta 200 may 
be executed. The ivk is illegal if the meta- 
instruction is illegal. Skip if meta-* j nstruct i on 
would skip. 
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Reverse share. A capability in the invoked sphere is 
copied and the copy Placed in the CI 1st of the 
sohere executing the instruction. 
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Share, A capability in the sphere executing the 
instruction is copied and the copy placed in the en- 
list of the Invoked sphere. 
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Reverse grant. 
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Grant, Grant and reverse grant are similar to share 
and reverse share, except that the donor's copy is 
deleted, Ente r ed process caPabil i ties -may be grant* 
ed but not snared. 

Format of (reverse) share and grant 



The capability in the donor specified by 1(6^11) is read 



and Placed in the C-»|ist of the 
1(12-17} if non- z ero# of the first 



receiver at the index in 
free index otherwise, If 



successful* skip and Put the index of the capability created 



in the receiver in A and 
unsuccessful* then 



a copy of the capability jn I, 



If 



1) a capability already e x »sts at the index in I < 12^17) (Or 
at all indices if I(12-17)=0) in which case the 
interfering capability (or the last capability) is placed 
in I* 

2) no capability exists at the index I (6-11 ) in which case I 
is cleared* or 



3) the capability is an entered process capability in which 
case i is cleared. 
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II. 2. 3 Processing entered process capabilities 

Having been informed that a fault has occurred, some 
action should be t ak en f This action may take two forms, 
Either one may use the po we rful sphere ivks and incur the 
cost of stopping processing in that sphere, or one ma y 
choose to use the less powerful entered process jvk's which 
affect only the process that caused the fault (the enterer). 
Having discovered why the fault occurred, and taken whatever 
action is desired, the entering process must be restarted. 
This can only be done by executing an entered process i vk 
with any of 51, 71, Ul, or 131 in the AC. Execution of any 
of these four ivkts will cause the following to occur; 

1) the entering Process is restarted according to the 
description belo w , 

2) the entered process capability in the superior Is 
deleted, 

3) the process executing the ivk will remain running. If 
this process has no more to do, it should execute a 
"qlt." 

An entered process capability may be granted or moved, but 
not shared or duplicated. Only on© copy may exist at a 

t i me, 

II»2«4 Relevant instructions 

Entered process ivks 

If A(l4) is zero, a read/wrjte core operation is specie 
fied. A(0-5) is ignored- The number of words to be 
transferred/40 is specified in A<6-12). If a count of 
zero is found, 10000 words will be transferred. If 
A(13) is a zer , data will be read into the sphere 
executing the ivk. If AC 13 ) is a one, data will 
written from the sphere executing the ivk, A(15^17) 
should contain I to be compatible with future modifi- 
cations, but is currently ignored, I<3^17) specifies 
the address in the entarer and will contain zeros in 
1(13-17) since this address must be on a 40 word 
boundary. The address of the data in the sphere 
executing the ivk is given in W(3^17). W(0-2) and 1(0- 
2) are ignored. Skip if successful, Locations 0^77 of 
core of a sphere with PRl_ on may not be read or 
wr i tten. 
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A \///////////\ count \W\ 0\ \ 

5 6 12 13 14 15 17 

I \/////\ address in entered 0\ 

2 3 12 13 17 



2 3 
AC Code 



core address 



Action 



\ 

17 



The A/ I> and W registers of the entering process are 
read into three consecutive words at the address 
given in 1(3-17), 
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The three consecutive words at the address given in 
1(3^17) are written onto the A, I, and W registers 
of the entering process. 



Restart* The entering process is restarted but it will 
not have its PC advanced or AAL indicator cleared. 
Hence, gnless the s phere is suppressed* the process 

will trap a9ain# 
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Return, The entering process js restarted and will 
have its PC advanced and AAL indicator cleared, If 
its ESI indicator (execute single instruction) is 
on, an ESI trap will occur. This makes the enter 
appear to "Complete." 
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Cause recoverable i||egaj instruction trap. The pro«* 
cess's PC ;s not advanced, nor is AAL cleared, so 
that the process wi I I appear to have not yet 
executed the illegal instruction. If the sphere 
does not have its illegal instruction return set, 
an illegal instruction trap to the superior wi'l 
occur • 
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Return and skiP, Similar to return (71), except that 
the PC is advanced one more ti">e, makjng the enter 
appear to skip. 
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Read 




Read capability* Reads the entry capability that the 
entering process invoked into A. Skip unless 
process has been deleted or unless index of 
capability invoked no longer exists. Effect is 
undefined jf entry was a fault entry to a sphere's 
super i or ? 
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IU3 

Illegal Instruction Return 

To avoid some of the time consuming work of letting 
faults trap to a superior, a program may wish to handle its 
own errors. For example, suPP°se a program executes an i vk 
16 expecting a mjcrotape Capability to be there* If index 16 
contains a null capability, then the program would get a 
recoverable illegal instruction error. In this particular 
case it might be nice to be able to catch this error, assign 
the needed mjcrotape, and continue. In another case, a user 
might wish to catch his attempts to reference an illegaj 
memory location, and either assign needed additional core or 
perform some error function. These functions are done 
respectively by setting the illegal instruction return or 
the illegal memory reference return, 

A program may intercept only recoverable illegaj instruct 
tions. Only the following are unrecoverafo ly i I legal ; 

h|t (770074) Asw, C-'^- 7 ?. 

bpt (770044) rwfa^ 

opcode 00 tafa & 

privileged instructions Mieg*\ \xAs 
attempts to reference 0-77 of core when PRl Is on. 
If a recoverably illegal instruction is executed, the 

process attempting th© execution is modified as follows; 
W(3-i7) contains the address of the illegal instruction, 
W(0-2) are cleared, and Q(3-17) is set to the illegal 
instruction return location. All else, including AAl, is not 
modified. This may require the first instruction of the 
error routine to be a nop or rpf. 



instruction Action 

mta 200 

Read illegal instruction return location into A, 

mta 2*H 

Set illegal instruction return from A, Any negative 
number in A wj j I disable this feature. 
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Illegal Memory Reference Return 

A program may Intercept any illegal memory reference. 
Note that referencing locations 0~77 of core of a sphere 
with PRL on is NOT treated as an illegal memory reference, 
but is an unrecoverab I y illegal instruction. The method of 
catching the iliegaj memory reference is the same as that of 
intercepting recoverable i||ega| instructions above. 



instruction 



Acti on 



mta 202 

Read i I I ega 



memory reference location into A 



mta 2^3 

Set i I legal memory 
negative number 



reference return 
j n A will disab I e 



from A, Any 
this feature, 
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11,4 Attachments 

Nhen a sphere is first created* it has a core address 
space consisting of a single 4K region, In the course of 
execution of a program, this quantity of allocated core 
space might be raised or lowered in blocks of 4K words by a 
mta 207, Memory space acquired in this fashion is sajd to be 
owned by the sphere and js referred to as a real core. 

It »s often found useful to be able to communicate data 
between two spheres* and there exist several means by which 
this may be accomplished. Two of the possible solutions are 
to jet both spheres have capabilities to one or more common 
objects (such as an entry capability or drum field}* and to 
give one sphere a capability to the other sphere such that 
the first may employ read/write sphere ivks, Both of these 
cases are frequently used* especially when th© data is 
primarily to be transmitted only one way, 

A third alternative is to share a portion of addressable 
core space between the two spheres. In this sharing, one 
sphere owns the core space as a real core and the other 
sphere receives an attachment. An attachment acts exactly 
like a real core except for two major things. First* having 
an attachment does not impjy any degree of ownership of the 
associated real core. Attachments will be deleted without 
notice when the real core is deleted. Second, the memory 
bound of a sphere is not modified when a core is attached; 
memory bound refers onjy to the real core owned by a sphere. 
However* a mta 206 will indicate the existence of attache 
ments if they are present (see section 1.3 for further 
description and a definition of memory bound). 

Consider the following example. Suppose sphere A having 
an initial memory bound of 10000 octal creates an inferior 
sphe r e B, and then attaches B's core as its core 2, S 
would perceive no change in its address space, but A f s 
address space would |o k I ike the following; 

legal legal 

- real illegal B's core illegal illegal illegal 
10000 20000 30000 40000 50000 60000 

Thus if a process in A should change A's core location 
21567* sphere B woyld find that location 1567 in its core 
has been changed. Memory references to an attachment are 
directed (efficiently) to the attached real core region. 

One use of attachments would be two separate spheres that 
wish to have a variables area ip common, without the 
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aggravation of sharing a drum field or creating entry 
capabilities for comm u n i cat i o n # Another example would be a 
sphere which creates an inferior sphere and finds attaching 
the inferior's core is a simpler method of entering data to 
the inferior than Performing read/write sphere iyks. 

Core of a sphere with PRL on may not be attached. 
Read/write sphere or process ivks must be used instead, 
although reading or writing the C-iist Is, of course, 
i I legal , 

Attaching a sPherets core requires inyoking a capability 
to the sphere with codes in the AC and I as noted below, 

AC Code Action 
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Attach, The core 


modu 


le of the invoked sphere 


(the 


attachee) specif 


ied b 


y I(15"17) becomes attach* 


3d to 


the sphere executing 


the ivk as 


the core module 


specified by 1(3- 


-5), 


This instructs 


ion wilj succeed 


if the attached 


core 


exists (as an attachment 


or a 


real core which 


is no 


t the core of a sphere 


w i th 


PRL on) and the 


attaching core |s 


not a real i 


sore, 


If the attached i 


Core 


i s i tse 1 f an 


attachment* 


the 


real core the '* 


attac 


hed core is an attachment to 


will be used. 


If 


the sphere 


to receive 


the 


attachment already 


has an attachment at the 


area 


specified by 1(3^5), 


the previous 


attachment 


wi 1 I 


be removed. An 


attachment may be made and main* 


tained whether 


the 


run Indicator 


of the invoked 


sphere is on or 


off. 


Skip if successful. 






Instruction 



Act i on 



mta 2$5 



Detach. The attached area to be detached is given in 
A(3"5} ; or, if that is zero, A(15-l7) f The Instruc- 
tion skjps unless jt is an attempt to detach a rea| 
core. 
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II. 5 



Breakpoints a n d ES I 



So me times it is useful to determine some statistics about 
a program's behavior* These might be such things as how 
frequently a loop in the program is executed, how many 
instructions are executed/ or how often a particular branch 
in the program is chosen. This ability is implemented by 
associating with each sphere a set of three "breakpoint" 
registers^ and associating w ith each process an ES I (execute 
singje instruction) flag. The ESI flag is F(6) and may be 
set onjy by a write process state sphere ivK instruction, 

Breakpoint registers allow the equivalent of ID'S super 
proceed £-nP) and its multiple proceeds (nP)» The breakpoint 
registers will be symbolically referred to as bPl, bp2j and 
bp3. Use of the breakpoint feature would involve approxi-* 
matejy the following steps, 

1) Since the setting of breakpoint registers and ESI are 
sphere ivks, it is necessary for the user to have a 
capability to the sphere in question, In the case where 
it is desired to measure a program's perf ormance* it will 
be necessary to put the program in a sphere, grant it the 
necessary capabilities,* etc. 

2? A bpt (770044) instruction must be explicitly put into 
the sphere at whatever location is desired, 

3) The breakpoint registers are interpreted as follows; 

bpl(0~l) 00 not a suoerProceed 

10 superProceed, haven't hit bpt yet 

01 hit hot, proceeding under ESI 

H proceeded, further bpts illegal 

bpU2) ignored 

bpl(3-17) address of bpt Instruction 



bp2 
bp3 



■sfnumber of times to proceed) 
instruction to replace bpt, if needed 



The chart below should be consulted for the myriad possibM" 
i t i es available to the user, 

4) A write breakpoint state sphere ivk is executed, and then 
the sphere's run indicator is turned on. 



Multiple proceeds Over a breakpoint that has been set do not 
try to distinguish between Processes that may hit the 
breakpolntt 
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SuPerproceeds are set up in a similar manner. It is not 
necessary to set a opt in the sphere,, however* nor is it 
necessary to specify an address in bpl(3-l7) or a replace.* 
ment instruction in bp3. a write process state sphere j vk 
must be performed to initially turn on ESI. This will cause 
the process to trap to the system after each instruction 
completes* and the number of instructions executed will be — 
the number specified in bp2. Arithmetic on bp2 is in ones 
compi ement. 

The breakpoint and £$I features may be disabled by 
settjng bpl to 777777 and writing the breakpoint state. 

The following instructions are the sphere ivks needed to 
perform the read/write breakpoint state registers. 

AC Code Action 

152 

Read breakpoint state. The three words of breakpoint 

state bpl, bP2, b P 3 are read into three consecutive 

words beginning at the address in 1(3-17). 



172 
112 



132 



'Write breakpoint state. Similar to 152. 



Read process state, The registers of the process whose 
number js in I are read and stored in six consecu-* 
tive words beginning at the address in w(3^17) f The 
order is A* G, I, X, F, and W, The sphere's run 
indicator must be off. Processes are numbered 
beginning with U This instruction will fail if the 
numbered Process does not exist or the r y n indica^ 
tor is on. Skip if successful. 



Write Process state. Similar to read process state, 
This will fail if the numbered process does not 
exist, the r u n indicator is on, or the process is 
in a wait. Skip if successful, 
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For clarification of a|| this material, a few examples 
are in order. First is a proQram that will set a breakpoint 
in an inferior sphere (at capability index 14) which will 
allow the inferior to hit the set breakpoint three times 
before trapping, It would be equivalent to the code ID would 
need to execute the commands 

"f oobleB 

3P " 
It assumes processing has ajready been suppressed on the sphere, 

dimension bp(3) 

dimension end(40) / space for reading in core 

lio (f ooble&777740 / 40 w rd block containing fooble 

law end / adr in this sphere for data 

mta / Put «n w register 

law 40 / read sphere, 40 words to be read 

i vk 14 / perform read sphere ivk 

hit /if read lost 

lac foob|e&37 e n d / get old contents of fooble 

dac bp 2 / bp3 

law i -*bpt / equivalent to lac (bpt 

dac fooble&37 e n d / insert breakpoint 

law 60 / write sphere, 40 words to be written 

ivk 14 / I, W unchanged from Previously 

hit /writefailed 

law i 3 / bp2 arithmetic is ones complement 

dac bp 1 / bp2 

law fooble / address of fooble, core assumed. 

dac bp / bpi(0-l) set to 00; bpl(3^l7> -> fooble 

lio (bp / address of three words of bpt state 

law 172 / code to write breakpoint state 

ivk 14 / w r i te i t 

law 32 / code to enabje processing in sphere 

ivk 14 / Processing is enabled. 

At this point* a proce s s or processes in the inferior sphere 
may hit the bpt three times before a trap to the above 
program will occur. If any other bpt's are hit, or other 
illegal instructions, etc., occur, they will produce the 
normal variety of trap. 
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The next example program will cause process 1 in the 
spher© at capability index i4 to execute 1000 instructions 
and then produce an ESI trap. Any other processes in the 
sphere wilt execute normally, without ESI, Once again^ it is 
assumed that the sphere's run indicator is already off, and 
that a process exists in the sphere that is ready to run, 
additionally it is assumed that process 1 is not |n a wait, 
dimension prcstt(6) / space for process state 
dimension bs(3) / space for breakpoint state 

/process l to be referenced 
address of Prcstt 
Put ' n W 

code to read process state 
get process state 
some lossage has occurred 

/ ESI bit in Flag word 
Process's F register, turn on ESI 
code for write process state 
wr j te process state 
some lossage 

Put A<0-1) = 11 and A<0-17) * 777777 
bpi set 

number of instructions to be executed 

/ bp2 
address of breakpoint state words 
write breakpoint state, 
write breakpoint state 
code to enable processing in sphere 
enable processing 

At this point process 1 in the sphe r e will be allowed to 
execute at most 1000 instructions before causing a trap. If 
the process does not otherwise cause some trap because of 
executing the program in the sphere, then exactly 1000 
instructions later an ESI trap will occur. 



1 io 


(1 


/ 


law 


prcstt 


/ 


mta 




/ 


law 


112 


/ 


i vk 


14 


/ 


hit 




/ 


1 aw 


4000 




adm 


prcstt 4 


/ 


1 aw 


132 


/ 


i vk 


14 


/ 


hit 




/ 


law 


i 4 


/ 


dac 


bs 


/ 


law 


i 1000 


/ 


dac 


bs 1 




1 io 


(bs 


/ 


law 


172 


/ 


i vk 


14 


/ 


law 


32 


/ 


i vk 


14 


/ 
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' 'Aizr 

/ of bpt \ 
^ bp±(3-i7'j 







replace bpt with 
the insfcr ;ln bp3i 




•save the ins to afe 
jthe address in bpl 
jin top3$ replace 

at with \ 




i ■* ESI I 

restart process! 
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Communication between spheresi Entry Capabilities 
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Each entry capability has a six-bit transmitted word. The 
transmitted word of a master entry capability may be changed 
but those of 
and sharing 
modi f i cat i on. 



a non-ma s ter may 
operations copy 



not. Duplication, granting, 
the transmitted word without 



When 


a non^master capability is ivk*d, the process 


creat^ 


in the entered sphere has its registers initialized 


as for a 


fault entry trap ( s ee H.2.1), except that 1(12-17) 


conta i ns 


the transmitted word and 1(8-11) contains the 


var iant c 


»f the ivK executed by the entering process (process 


that the entered process capability points at). The trans- 


mitted word is useful for distinguishing between several 


s i m i jar 


non-master entry capabilities without creating a 


separate 


master entry capability for each distinguishable 


non-master desired, Fo r example, suppose sphere A creates an 


entry, gives B a non-master with transmitted word 01 and C a 


non-^master with transmitted word 03, By the nature of an 


entry capability, when a Process in either B or C jvk's the 


non-master entry capability* a new process is created in A 


that sets 


j started at the entry address. The newly created 


process 


in A can quickly tell whether B or C has caused the 


enter by 


looking at the transmitted word in 1(12-17), 



Any of the entered process ivks listed in section 11,2,4 
may be used with entered process capabilities generated by 
invoking entry capabilities, 

A sphere that wishes to guarantee an enter can occur 
should set its process hoa r d, 
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111,2 

Instruction Action 



Entry Instructions 



mta 307 

Create master entry* AC12-17) contains desired capa« 
bility index; if the first free index is used, 
1(3-17) contains desired entry address. Skip if 
successful , 

ivk <master entry> 

Change transmitted word of master entry capability, 
AQ2-17) becomes new transmitted word and A(0-11) 
must be clear. 




C-^list index mm in. sphere A is the master entry capabiH^ 
ty# C-ljst index xx in sphere B is a non-master capability 
associated with entry mm f The number nn in the ivk nnxx may 
vary from to U U bits) and is the variant of the ivk, C- 
list index cc is the entered process capability created 
after the ivk nnxx y*as executed, 
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IV, 



pisowned Objects 



An object in a sphere's CHist may be deleted without 
deleting the corresponding object. If an object exists in 
the system, some sphere somewhere must own it, and there 
must be a path from the "root node", the C-list of the 
timesharing system, to the object in question, If such a 
link does not exists, or is broken, the system will free the 
resources represented by that object. ^— 



One very well kno w n Program, SPacew 
versions performs the following; creates 
copies a|! of core into the inferior, and 
of ships playing to the inferior, st 
runnjng, disowns the sphere, then dismi 
the console could be logged out and Space 
to run, even though th e original owner ha 
the system. Disowning actually is equiva 
the specified capability to the Admini 
the system so that in fact the "disowned" 
the system, 

Any sphere may request ownership of any disowned 
Absentee computations must be performed using thi 

n i que* 



ar, in 
an inf 
, pass 
arts 
sses, 
war wo 
s been 
lent t 
strati 
objec 



many of 
er i or s 
es the 

the i nf er i or 
At this point 
uld continue 
deleted from 
o a grant 
ve Routine 
t is owned by 



iphere, \ 
number \ 
or 
nt 

ue 
om . 
of 
of \ 



object, 
this tech-»: 



Instructions 



Action 



mta 501 



Disown capability, Capability in 1(6-11) Is disowned. 
An index is returned in A which should be used to 
reown the object w hen desired. Skip if successful 
and copy of the capability is placed in I, The copy 
of the capability at the index given in 1(6^11) is 
removed from the C-list, 



mta 



2© 



502 

Own capability. Disowned object whose index is in I(6~ 
11) Is reowned onto capability U12-17) (or first 
free index if I C 12-17) is zero). New index of the 
capability in the sphere executing the mta 502 is 
returned in A, Copy of the capability is placed in 
I. Skip if successful. If not successful, the sane 
action is taken a s for a mta 405, 
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If a disowned sphere attempts to reown itself, assuming 
no other sphere has a capability to the disowned sphere in i 
question, then the sphere w ill be deleted from the system J 
forrfclW r* aonn nrVffl a t*?"*i 



